Viewing profile — _phred

A very cursory internet search shows that your history is entirely wrong: https://agileforall.com/history-of-tdd-as-told-in-quotes/ Djikstra proposed the idea in the 1970s. Rails d…

Very helpful y’all, thanks! Gonna see if I feel up to tackling the repair (good excuse to buy a reflow setup) and or get in touch with this gentleman. Cheers!

I’ve got two first gen HomePods here which died slightly out of warranty, and AppleCare wanted $300 a piece just to take a look at them. Makes me quite gunshy about spending yet an…

Hmm, yes, I think I conflated the asymmetric vs symmetric cases. Shor's algorithm is very tasty, but when the real world demonstrations at top research facilities are saying, "yes,…

Ah shoot, you're right. I'm an armchair crypto geek at best. In any case, you can choose a public key exponent large enough to still make it a hard problem to crack in a reasonable…

The best publicly known attacks on RSA reduce the attack time by a few orders of magnitude at best. A functional quantum CPU could reduce that by a few more orders. Your 4096-bit R…

Yes: call/SMS forwarding. It depends on how good your first factor (e.g. password policies) are, and how your reset process works. Getting someone's phone number and setting up cal…

Looks like it's built around KVM (Kernel Virtualization Modules), i.e. "containers", rather than full-blown virtual machine emulation like Xen or VirtualBox/Vagrant. It appears to …

Wow, that comment thread... does not lend itself to confidence in their project's security. It also illustrates a really key point about crypto: because it looks simple (oh, just r…

Hackers built Facebook. They hire hackers. If there's a group that's hardest to pigeonhole in terms of beliefs it's hackers . The idea that a company composed if hackers could have…

Interesting, thanks!

I have a theory that the accelerometer-linked 3D "layer" effects might make the flat interface more usable in person. As in, the subtle perspective shift would make it obvious that…

A lot of API authentication is half-assed, like the examples in the article. "OAuth is hard, roll your own" is a common approach. Even with, e.g., OAuth 2, who's to say that the sc…

Right. If the attack vector is "break SSL" I'm going to try some other attacks first. There's an underlying assumption in the question: my app (and everything else hosted on the bo…

O, cruel fortune! I rue my talent.

So as a sort-of-amusing counterpoint to this article, I know at least one ASV who insists that the only way to mitigate BEAST is to disable all ciphers but RC4. Still scratching my…

There's nothing like good old plain text. :) Nowadays I'm downright spoiled and use org-mode[1] to keep my systems journals. Org files are plain text as well, and org-mode takes ca…

I'm throwing my hat in the ring. I took the author's original post and implemented it as an Ansible playbook in a little less than an hour. http://practicalops.com/my-first-5-minut…

Very, very difficult, unless the host relies on a single timesource. Best and common practice is to use 3-4 sources from different organizations in the ISC pool. It also wouldn't s…

Whoa, your terminal playback thing is pretty neat. Did you use GNU Screen to record the session?

Your last point is DEFINITELY a +1 over Heroku. Although I'd be pissed to lose my deployment & monitoring tools and have to piece it all back together (especially after I thought i…

At $9/month I suspect you are drastically under-valuing the service you provide. Sysadmin time is expensive, and your value proposition is the same as Heroku: pay us so you don't w…